Thursday, December 06, 2007

The top 10 computer security threats for 2008

The 2008 Olympics is likely to spur a flurry of hacker activity, says Websense Inc, which specializes in web filtering and security software, releasing the top ten computer security threats for 2008.

"Looking at the current attack trends, cyber criminal techniques are evolving quickly and efficiently to not only evade detection, but to steal data and manipulate trusted content such as Web sites and applications," said Dan Hubbard, vice president of security research, Websense, in a media release. "It's critical that organizations and individuals recognize that attackers are changing techniques and launching targeted attacks."

The top 10 security threats are:

1. Olympics: New cyber attacks, phishing and fraud

Event-based attacks and scams are popular, and with the whole world watching, the 2008 Olympics may fuel a surge in cyberattacks, says Websense. As the Olympic torch burns, Websense researchers predict the possibility of large scale denial-of-service attacks on Beijing Olympic-related sites as political statements and fraud attempts through email and the Web surrounding the Olympics. Additionally, Websense predicts compromises of popular Olympic news or other sports sites -- attacks designed to install malicious code on end-users' machines and steal personal or confidential business information.

2. Malicious spam invades blogs, search engines, forums and Web sites

Websense predicts that hackers will increasingly use Web spam to post URLs to malicious sites within forums, blogs, in the commentary or 'talk-back' sections of news sites and on compromised Web sites. This activity not only drives traffic to the infected Web sites but also assists in the purveyor's site sitting higher on search engine rankings, increasing the risk that users will visit the site.

3. Attackers use Web's 'weakest links' to launch attacks

The Web is an entanglement of links and content. The advent of Web 2.0 additions such as Google Adsense, mash-ups, widgets, and social networks along with the massive amounts of Web advertisements linked to Web pages have increased the likelihood of 'weak links' -- or Web sites and content that are vulnerable to compromises.

Websense predicts that attackers will increasingly exploit the weakest links within the Web infrastructure in order to target the greatest number of Internet users. Most vulnerable to these attacks are search engines and large user networks such as MySpace, Facebook or other social networking sites.

4. Number of compromised Web sites will surpass number of created malicious sites

The Web as an attack vector has been steadily increasing for the last five years and now attackers are using compromised sites as their launching platforms -- even more than their own created sites. Compromising sites -- particularly, sites well-visited by end-users, such as the Dolphin Stadium attack that occurred a few days prior to the 2007 Super Bowl XLI in Miami, provides attackers with built-in Web traffic and minimizes the need for lures through email, instant messaging or Web posts.

5. Cross-platform Web attacks: Mac, iPhone popularity spurs increase

With the brand popularity and growing use of iPhones and Macintosh computers, Websense researchers predict attackers will increasingly launch cross-platform Web attacks that detect the operating system in use and serve up code specifically targeting that operating system instead of attacks based on just the Web browser. Operating systems that are targeted now include Mac OSX, iPhone, and Windows.

6. Rise in targeted Web 2.0 special interest attacks: Hackers targeting specific groups of people based on interests and profile

Web 2.0 has spawned a proliferation of Web users that visit chat rooms, social networking sites, and special interest Web sites such as travel sites, automotive, and more. These sites provide attackers with potential victims that fall within a certain age group, wealth bracket, or people with particular purchasing habits. In 2008, Websense researchers predict targeted attacks will rise toward specific social networking or special interest sites that have a higher probability of delivering a payoff.

7. Morphing JavaScript to evade anti-virus scanners

Hackers are upping the ante with evasion techniques that use poly-morphic JavaScript (Polyscript) -- which means that a uniquely-coded Web page is served up for each visit by a user to a malicious Web site. By changing the code every visit, signature-based security scanning technologies have difficulty detecting Web pages as malicious and hackers can extend the length of time their malicious site evades detection.

8. Data concealment methods increase in sophistication

Websense predicts an increased use of crypto-virology and sophistication in data concealment including the use of stenography, embedding data within standard protocols, and potentially within media files. Toolkits widely available on the Web will be used to embed proprietary information and steal data.

9. Global law enforcement will crack down on key hacker groups and individuals

In 2007, large-scale Internet-based attacks garnered the attention of law enforcement officials around the world. Websense anticipates that through the global cooperation of enforcement agencies, in 2008 the biggest crackdown and arrests of key members of a hacker group will occur.

10. Vishing and voice spam will combine and increase

The vast cell phone user population has grown into a lucrative market to exploit with spamming and "vishing" for financial gain. To date, researchers have seen an increased number of vishing attacks but not a lot of spam -- or pro-active automated calling. In 2008 Websense predicts that 'vishing,' or the practice of using social engineering and Voice over IP (VoIP) to gain personal and financial information, and voice spam will combine and increase -- users will receive automated voice calls on LAN lines with voice spam to lure them to input their credentials through the telephone.

Friday, November 30, 2007

How To Increase Traffic to Your Blog / Best Ways To Increase Traffic to Your Blog

One important topic for blog owners is how to increase traffic, which is easier than it seems, once you know how. In this article, we cover 7 specific methods of increasing traffic to your blog.

Tip #1: Sign up for pinging services
It seems pretty obvious, but many bloggers, even those who are more experienced, don’t sign up for pinging services. If you’re new to blogging, pinging means that when your blog is updated, a “ping” is sent out by the service to let pinging sites know that your blog has been updated. People who are visiting sites with pinging services will then see your blog flash across the side of the screen as “newly updated.” Pinging services include Yahoo’s blogs, weblogs.com, Google Blog search and ZingFast.

Tip #2: Sign up for Technorati
If you go to technorati.com, you’ll see an option on the left side of the screen to “Claim Your Blog.” Doing so allows you to get updated link counts, add your photo or branding to Technorati and see your Technorati link. Having your blog claimed on Technorati helps to increase traffic because the millions of people who go to that site will have a chance to see your blog listed there.

Tip #3: Sign up for FeedBurner, an RSS service
FeedBurner basically helps you to promote your blog’s content, and to build and measure your audience.

Tip #4: Bookmark your blogs at places like del.icio.us
You can set up an account and profile at del.icio.us. From there, you can add links to your blog, as well as excerpts. When a user visits your profile on del.icio.us, they will see a link to your blog and excerpts. There are other social bookmarking sites that you can use in much the same way. All of these social bookmarking sites can help you increase traffic.

Tip #5: Post comments at other blogs
Here, you should visit similar blogs to your own, post legitimate comments and then sign your name(along with a link to your blog). This way, people know you aren’t there just to promote your site—you’re there to post a good piece of feedback and also say where you’re from.

Tip #6: Ask owners of other blogs to post a link to yours
Find other blogs that are similar to yours. If they seem to be decently popular (if they have a good amount of comments for each post), contact the owner of the blog and ask if they will add a link to your blog. Offering to link back to their blog is a way to sweeten the offer. Reciprocal linking helps to increase traffic.

Tip #7: Use keywords in your blog
Like regular Web pages, having a good keyword density on a blog is a terrific way of getting search engine spiders to notice your page. (FYI: search engine spiders are programs from search engines that browse sites and report back their findings to the search engine database, which then lists that site. The more keywords on your site, the more likely it is for a search engine spider to pay a visit)

If your average blog posting is around 200 words, use 2-6 keywords per blog post. This creates a keyword density of between 1 and 3 percent, a respectable number. Remember that you don’t want to use too many keywords, as that will make your blog look bad. Also be sure that the keywords used are relevant to your blog. Before even making a blog posting, decide what the post will be about and then select a keyword or two to use in your post. This will help to increase your traffic.

Tuesday, October 23, 2007

Advantages and disadvantages of flash usage in web design

Flash allows web developers to create interactive content, such as animations, animated menus, movies, games and more. Flash animations can be made rapidly, using a certain type of software which provides the developer with visual tools easy to use and understand.

Flash is based on vector graphics, which means
that flash animations can be rescaled without losing the image quality. Flash animations can be embedded in HTML pages as menus, movies or web site layouts. You will be able to create presentations, short courses, quizzes, Flash being an effective multimedia tool in business marketing and e-learning due to the possibility of easy control and model of the degree of interactivity for a certain animation. Flash movies have a high loading speed, being rendered with controllable quality by all major modern web browsers.

There are also disadvantages of Flash, depending on its implementation in a web site structure. For example, if your website needs the presence of many customers, it’s recommended to avoid the excessive flash usage, especially in web sites intros. Flash is not optimized for search engine indexing, and as a consequence, the content of your Flash animation is not visible for search engine spiders.

If your flash intro will contain unoptimized raster images, the final animation size will determine higher page loading times, which could mean losing many of your visitors or customers. On the other hand, updating the Flash content of a given website could be more expensive than traditional content non-Flash based.

The selection criteria of Flash editing tools is also important, due to performance of optimization options and their cost. In conclusion, as a function of your website destination, you should carefully select the parts where Flash animations will fit in, and never overuse Flash animations.